Yes, I would agree that we shouldn't connect to public WI-FI because of the risk. However, even private WI-FI can be spoof as well, you can read this thread for more information - https://bitcointalk.org/index.php?topic=5164359.0.
Thanks for the resource. I'm adding it in the blog